ACTIVELY EXPLOITED VULNERABILITIES CVE-2026-8452 — Citrix NetScaler ADC/Gateway Memory Buffer Vulnerability: Originally patched Jun 30 as a denial-of-service issue; researchers demonstrated unauthenticated remote code execution capability. CISA added to KEV Aug 26; FCEB remediation deadline was Aug 29. CVE-2026-66384 — JFrog Artifactory Path Traversal | CVE-2026-53362 — Linux Kernel Unspecified | CVE-2023-49105 — ownCloud Improper Authentication: All three added to CISA KEV o

ACTIVELY EXPLOITED VULNERABILITIES CVE-2026-8452 — Citrix NetScaler ADC & Gateway (CVSS 8.8): Memory overflow vulnerability added to CISA KEV on August 26. FCEB agencies must patch by August 29, 2026. Actively exploited in the wild. CVE-2026-55040 + CVE-2026-63520 — Microsoft SharePoint RCE Chain: JWT token authentication bypass (CVE-2026-55040) chained with Business Connectivity Services RCE (CVE-2026-63520). Public PoCs released; active exploitation began within 24 hours. C

ACTIVELY EXPLOITED VULNERABILITIES CVE-2026-33824 — Microsoft IKE Service Extensions Double Free Vulnerability: Critical RCE flaw in Windows Internet Key Exchange that allows unauthenticated remote code execution with no user interaction. Fixed in April 2026 Patch Tuesday. Added to CISA KEV on August 18, 2026. FCEB agencies must remediate per BOD 22-01. CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability: Allows authentication bypass over a network connect

ACTIVELY EXPLOITED VULNERABILITIES CISA KEV (Aug 11): CVE-2026-20349 — Cisco Secure Firewall ASA/FTD Heap Inspection vulnerability; CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free LPE (FCEB patch deadline: August 25, 2026); CVE-2026-72898 — Metabase SQL Injection vulnerability. All three have confirmed active exploitation. CISA KEV (Aug 3): CVE-2026-18577 — N-able N-central Authentication Bypass Using an Alternate Path or Channel vulner